Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/CYq4FsSsWlnRVU1VZoAcMATg64M.roa
File: CYq4FsSsWlnRVU1VZoAcMATg64M.roa (raw, json)
Hash identifier: eoXj/UqlaZcuq4q1P5KJXt1AEEwP2hC4p9xA7teW1ys=
Subject key identifier: 09:8A:B8:16:C4:AC:5A:59:D1:55:4D:55:66:80:1C:30:04:E0:EB:83
Certificate issuer: /CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Certificate serial: 03
Authority key identifier: 66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/CYq4FsSsWlnRVU1VZoAcMATg64M.roa
Signing time: Wed 01 Jun 2022 07:10:00 +0000
ROA not before: Wed 01 Jun 2022 07:10:00 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 137730
IP address blocks: 103.124.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Validity
Not Before: Jun 1 07:10:00 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=098AB816C4AC5A59D1554D5566801C3004E0EB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:dc:fc:42:a2:ad:69:70:fd:85:19:ff:db:
37:f9:10:67:ad:56:f0:cf:db:27:c8:95:dc:f5:94:
ca:d6:43:8f:05:28:39:04:37:6d:68:7e:89:49:41:
f4:b1:d9:75:10:e9:e7:9f:40:88:6d:15:96:27:4d:
48:49:f9:99:8f:04:62:2d:9b:66:02:ac:36:f4:bc:
46:40:0c:09:e7:33:bc:c0:cf:0b:c5:5d:37:a0:97:
9e:03:01:86:bd:e4:5d:90:ce:22:ad:0d:f0:e8:ac:
2c:86:a9:05:0a:b4:e3:14:ee:53:3a:b8:fc:bc:88:
48:d7:98:d7:89:38:ec:28:fe:a7:a8:88:3b:28:d7:
a7:3f:0b:49:b5:2f:c3:d1:5c:fc:f6:46:ae:a7:db:
a1:b3:2a:19:4f:18:39:8c:49:41:93:87:c3:46:f2:
87:56:90:64:9a:13:ba:f6:66:a1:51:3f:2d:98:a2:
9a:9a:8c:cc:76:99:63:3f:af:3c:80:0a:65:ae:e7:
da:eb:72:7a:a8:37:5f:ed:dd:95:71:67:ff:c2:03:
0c:e8:97:8a:cf:c1:ee:c5:67:41:54:8b:8f:ff:a3:
b3:f8:0f:5e:7d:0d:7d:79:ba:1e:74:c2:d0:9b:da:
d0:ec:0f:62:64:ec:88:7c:6c:69:cf:80:12:34:56:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:B8:16:C4:AC:5A:59:D1:55:4D:55:66:80:1C:30:04:E0:EB:83
X509v3 Authority Key Identifier:
keyid:66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/CYq4FsSsWlnRVU1VZoAcMATg64M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.48.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c5:6d:92:2d:6f:d6:6c:21:1d:6b:b5:ee:e3:ef:12:97:2d:
9f:78:99:d4:2e:e3:89:d1:1e:f9:51:c0:53:b1:15:50:eb:04:
a4:dd:05:8f:4b:e7:a8:e2:5f:eb:c2:6d:6d:02:47:59:f2:82:
34:63:b9:18:14:70:d7:55:0c:c0:ef:48:e4:19:2c:8d:a7:e6:
b5:93:18:a7:97:ee:a6:ac:81:6a:d4:e8:21:e8:b9:bb:c0:4b:
47:5e:c1:79:6a:6b:4d:ad:35:24:f3:12:1c:6b:b9:2e:0a:6d:
14:77:30:5e:2a:38:62:cd:01:9b:d0:99:55:e4:c2:bb:36:17:
d7:f8:c6:68:5d:70:cb:68:4f:48:74:39:1f:38:81:fe:98:a8:
6a:7d:49:74:56:54:68:bd:cc:6f:ce:07:0c:64:b6:15:9d:2b:
2d:17:0f:2a:17:00:13:85:f9:96:d5:90:57:65:8e:47:51:2d:
4a:55:91:d6:6f:54:b9:df:61:b9:25:df:7d:34:8c:8d:66:ef:
67:43:97:eb:8e:ea:11:26:49:bf:37:7d:d5:a1:d6:bc:9f:b9:
ab:db:01:76:52:38:39:31:63:a6:9f:2d:99:7f:de:70:9e:b0:
79:3f:3a:d4:19:0a:b0:98:1a:cc:93:fb:68:6c:ac:6d:cc:c1:
31:51:19:85
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NjQ3
REFCNjQ1NTExNjk2NEZBQzAwMDEyQ0NDODMxNzRENEU0NkUxMB4XDTIyMDYwMTA3
MTAwMFoXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoMDk4QUI4MTZDNEFDNUE1
OUQxNTU0RDU1NjY4MDFDMzAwNEUwRUI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN2c3PxCoq1pcP2FGf/bN/kQZ61W8M/bJ8iV3PWUytZDjwUoOQQ3
bWh+iUlB9LHZdRDp559AiG0VlidNSEn5mY8EYi2bZgKsNvS8RkAMCeczvMDPC8Vd
N6CXngMBhr3kXZDOIq0N8OisLIapBQq04xTuUzq4/LyISNeY14k47Cj+p6iIOyjX
pz8LSbUvw9Fc/PZGrqfbobMqGU8YOYxJQZOHw0byh1aQZJoTuvZmoVE/LZiimpqM
zHaZYz+vPIAKZa7n2utyeqg3X+3dlXFn/8IDDOiXis/B7sVnQVSLj/+js/gPXn0N
fXm6HnTC0Jva0OwPYmTsiHxsac+AEjRWjKMCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBQJirgWxKxaWdFVTVVmgBwwBODrgzAfBgNVHSMEGDAWgBRmR9q2RVEWlk+sAAEs
zIMXTU5G4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yODIz
L1prZmF0a1ZSRnBaUHJBQUJMTXlERjAxT1J1RS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWmtmYXRrVlJGcFpQckFBQkxNeURGMDFPUnVFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgyMy9DWXE0RnNTc1dsblJW
VTFWWm9BY01BVGc2NE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3wwMA0GCSqGSIb3DQEBCwUAA4IBAQBFxW2SLW/WbCEda7Xu4+8Sly2feJnU
LuOJ0R75UcBTsRVQ6wSk3QWPS+eo4l/rwm1tAkdZ8oI0Y7kYFHDXVQzA70jkGSyN
p+a1kxinl+6mrIFq1Ogh6Lm7wEtHXsF5amtNrTUk8xIca7kuCm0UdzBeKjhizQGb
0JlV5MK7NhfX+MZoXXDLaE9IdDkfOIH+mKhqfUl0VlRovcxvzgcMZLYVnSstFw8q
FwAThfmW1ZBXZY5HUS1KVZHWb1S532G5Jd99NIyNZu9nQ5frjuoRJkm/N33Voda8
n7mr2wF2Ujg5MWOmny2Zf95wnrB5PzrUGQqwmBrMk/tobKxtzMExURmF
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org